Re: adding a route to the client

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

On 31 Mar, 15:05, "Phillip Windell" <philwind...@xxxxxxxxxxx> wrote:
Enable "use gateway on remote network" in the Dialup Connectiod.  Then if
the LAN's routing scheme is valid and functional the Client can get to all
segments of the LAN after they connect.

If you disable "use gateway on remote network" then the client will only be
able to connect to the subnet that they directly VPN into.

--
Phillip Windellwww.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processinghttp://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-...

Microsoft Internet Security & Acceleration Server: Partnershttp://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutionshttp://www.microsoft.com/forefront/edgesecurity/partners/hardwarepart...
-----------------------------------------------------

"jogdial" <jogd...@xxxxxxxxx> wrote in message

news:1856ae74-7bdf-44d3-af65-b69477b54028@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx



Hi,

This isn't exactly an ISA question I guess, but the client is
connecting to an ISA server and I don't know anywhere else that anyone
will know what I'm talking about.

I connect my clients VPN to an ISA server.  The ISA server gives the
client and IP address via DHCP, so it naturally may change each time
you connect.

I have a network at work, and it is connect to additional networks in
different IP ranges via another router.

To get to those networks, I need a route add network on my client PC.
Currently, that is easy enough for me as I get the IP number that I
have been give via DHCP and use that as the gateway.   Now I have
other users that are not network savy that need to do the same thing
and before I go writing scripts or anything to parse out the local IP
address so I can use it in a batch file to put in as my gateway in the
route command... is there any way that I can do this without gettting
the local ISA server/DHCP assigned IP address?  I don't route
everything through my ISA server is why I need to do this.. as we only
have limited bandwidth at work and everyone has their windows
firewalls on etc, I don't want to route everything they do on the
Intenet through our network, only traffic bound for our networks.

Hope that makes some sense to someone as it's already starting to look
like assembler code I wrote 10 years ago to me, made sense at the time
anyway...  ;-)

Cheers- Hide quoted text -

- Show quoted text -

Hi, That's exactly what I'm trying _not_ to do. If I do that, then
all the VPN users and all their traffice bound for the Intener as well
as our networks get routed through our company Internet circuit and we
are a bit short on bandwidth these days. That's why we unchecked the
box in the first place.

Thanks
.

Relevant Pages

  • Re: VPN networking problem
    ... Try UNchecking the box in your client vpn properties that says "use default ... gateway on remote network". ... > Ethernet adapter Local Area Connection: ...
    (microsoft.public.win2000.networking)
  • Re: ISA 2004 Access Denied Error
    ... You do not need a default gateway on the internal NIC. ... Make sure your Internal address range (under Network objects in the ... toolbox) correctly reflects the 10.x.x.x range of your lab internal net. ... > The internal NIC on the ISA server is configured with an IP address on ...
    (microsoft.public.isaserver)
  • Re: Convention User Woas
    ... gateway, they're not able to reach off the LAN either, as most operating ... Where they st00pid enough to not spoof the MAC address as well? ... If this is a _wired_ network, you can set your switch so that it knows on ... with some APs you can set them so there is no client to client traffic ...
    (comp.dcom.lans.ethernet)
  • Re: IE 6 and Proxy Setting Exceptions
    ... Enter those address's in the internal network object on the tab where you ... entered or entered through a gpo will be removed by the script. ... Firewall Client installed. ... On the ISA server the config set for the ...
    (microsoft.public.isa)
  • VPN & SBS2003+Win2003Server/ISA Server
    ... I'm trying to set up my VPN on my SBS 2003 network ... * SBS 2003 PDC Server (Not running ISA Server) ... Note Internet works fine, and there is no firewall on the ADSL Router ... * Making a remote connection disk and installing it on the client PC ...
    (microsoft.public.windows.server.sbs)